Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/108b2c-d0c8-4818-97bc-f8efe29397ea/1/NAGbKlAmfLYcC-dlKo0Usnv0hp4.mft
File:                     NAGbKlAmfLYcC-dlKo0Usnv0hp4.mft (raw, json)
Hash identifier:          OXf8MEu3Ro/CgXuiSaBNOxKemX4ofBq/YhhNVaoR4Tw=
Subject key identifier:   87:AB:19:49:A8:8F:58:8B:78:12:AE:61:52:1F:CA:FC:F8:1D:C2:56
Authority key identifier: 34:01:9B:2A:50:26:7C:B6:1C:0B:E7:65:2A:8D:14:B2:7B:F4:86:9E
Certificate issuer:       /CN=34019b2a50267cb61c0be7652a8d14b27bf4869e
Certificate serial:       01962FAB18F153C700A1BE625EA429753491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAGbKlAmfLYcC-dlKo0Usnv0hp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/108b2c-d0c8-4818-97bc-f8efe29397ea/1/NAGbKlAmfLYcC-dlKo0Usnv0hp4.mft
Manifest number:          05C3
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: NAGbKlAmfLYcC-dlKo0Usnv0hp4.crl (hash: RE5LaPAAOuSE/DRjFA0Tppjh2PlyYxieI8eMD3D5Pqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:18:f1:53:c7:00:a1:be:62:5e:a4:29:75:34:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34019b2a50267cb61c0be7652a8d14b27bf4869e
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=87ab1949a88f588b7812ae61521fcafcf81dc256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:96:b1:15:30:a9:8e:e3:ad:28:6b:bf:7c:
                    65:8b:51:77:83:56:a5:b9:b0:76:71:28:f8:b5:54:
                    54:0f:60:76:87:80:f2:5b:10:b7:cf:60:9a:43:8c:
                    9a:3f:85:85:57:71:c6:7d:9f:57:6a:27:d8:99:f5:
                    e0:73:cf:75:22:37:57:25:a8:07:c6:39:24:2f:e5:
                    65:f8:55:fa:83:81:fc:6a:ee:fc:5c:3e:f9:e0:76:
                    07:e2:ef:38:ef:09:26:f0:6a:47:61:bc:e5:ba:d4:
                    fd:8c:52:d7:06:30:b3:b7:63:cf:7c:70:04:10:51:
                    27:22:ed:96:e8:87:44:81:a1:3b:e4:c4:29:86:3b:
                    2f:da:a8:15:a3:9d:e7:56:1c:09:37:fe:04:85:be:
                    3e:79:59:92:30:e7:e4:77:12:7f:2d:1f:16:e6:ee:
                    6a:99:de:a4:fc:d2:f1:99:6a:cf:02:f8:2a:a7:00:
                    56:c9:25:85:fe:5c:50:8f:52:29:d4:1d:4d:11:92:
                    d2:d9:95:e4:fb:0a:2e:a7:f9:c1:df:4c:8a:10:1d:
                    80:f1:6c:65:94:fd:24:aa:dd:1d:8c:24:aa:ef:24:
                    9d:d3:be:cd:23:f5:c1:86:e5:6e:de:0b:cf:22:6c:
                    6d:b3:04:bc:aa:6b:3f:1f:5b:3a:5b:14:b4:12:42:
                    fe:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AB:19:49:A8:8F:58:8B:78:12:AE:61:52:1F:CA:FC:F8:1D:C2:56
            X509v3 Authority Key Identifier:
                keyid:34:01:9B:2A:50:26:7C:B6:1C:0B:E7:65:2A:8D:14:B2:7B:F4:86:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAGbKlAmfLYcC-dlKo0Usnv0hp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/108b2c-d0c8-4818-97bc-f8efe29397ea/1/NAGbKlAmfLYcC-dlKo0Usnv0hp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/108b2c-d0c8-4818-97bc-f8efe29397ea/1/NAGbKlAmfLYcC-dlKo0Usnv0hp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b2:22:f3:7f:8d:e8:87:df:d9:2a:3c:e9:51:38:62:34:ad:
         1e:37:59:68:d2:5d:ec:06:2d:84:c1:81:b3:7f:3f:4a:36:d9:
         e3:66:99:c8:14:f3:c9:fe:cb:91:45:7d:7a:b6:76:74:ba:b5:
         96:98:e4:e4:e4:bd:52:bf:64:d8:36:e5:4e:ff:32:51:e3:85:
         47:91:69:5e:63:bc:89:6b:00:85:c3:20:fc:be:bf:98:29:95:
         d0:91:04:65:f0:3c:42:f5:cb:57:98:42:b6:e5:8f:df:b9:0a:
         0b:56:94:51:dd:5c:96:74:ee:a1:2b:a9:c0:a8:e5:54:53:3f:
         98:f7:e3:a3:63:96:6d:ba:87:cc:ec:54:4e:d8:0d:e1:9a:06:
         34:95:a9:38:a8:7a:eb:0d:4b:ff:71:91:cc:46:49:46:8a:58:
         6f:3b:f4:e8:d3:26:a6:98:2b:85:65:7b:b4:5d:c5:ee:d9:61:
         e0:1c:4b:d5:a3:be:b6:5e:4f:b9:72:06:68:8d:38:97:54:7c:
         6e:4e:5d:28:18:b9:80:04:06:16:d4:53:f5:55:c3:46:f2:2e:
         4d:ad:ca:b4:9f:4a:6e:11:cd:15:ac:99:ec:89:ef:01:bb:9d:
         be:55:c4:cd:b7:4e:31:73:9b:14:cc:54:b9:64:9e:04:a0:7f:
         e4:0d:cd:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxjxU8cAob5iXqQpdTSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDE5YjJhNTAyNjdjYjYxYzBiZTc2NTJhOGQxNGIyN2Jm
NDg2OWUwHhcNMjUwNDEzMTUwMTA0WhcNMjUwNDE0MTUwMTA0WjAzMTEwLwYDVQQD
Eyg4N2FiMTk0OWE4OGY1ODhiNzgxMmFlNjE1MjFmY2FmY2Y4MWRjMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11uWsRUwqY7jrShrv3xli1F3g1al
ubB2cSj4tVRUD2B2h4DyWxC3z2CaQ4yaP4WFV3HGfZ9XaifYmfXgc891IjdXJagH
xjkkL+Vl+FX6g4H8au78XD754HYH4u847wkm8GpHYbzlutT9jFLXBjCzt2PPfHAE
EFEnIu2W6IdEgaE75MQphjsv2qgVo53nVhwJN/4Ehb4+eVmSMOfkdxJ/LR8W5u5q
md6k/NLxmWrPAvgqpwBWySWF/lxQj1Ip1B1NEZLS2ZXk+woup/nB30yKEB2A8Wxl
lP0kqt0djCSq7ySd077NI/XBhuVu3gvPImxtswS8qms/H1s6WxS0EkL+bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIerGUmoj1iLeBKuYVIfyvz4HcJWMB8GA1UdIwQY
MBaAFDQBmypQJny2HAvnZSqNFLJ79IaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFHYktsQW1mTFljQy1kbEtvMFVzbnYwaHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMDhiMmMtZDBjOC00ODE4LTk3YmMt
ZjhlZmUyOTM5N2VhLzEvTkFHYktsQW1mTFljQy1kbEtvMFVzbnYwaHA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMDhiMmMtZDBjOC00ODE4LTk3YmMtZjhlZmUyOTM5N2Vh
LzEvTkFHYktsQW1mTFljQy1kbEtvMFVzbnYwaHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbIi83+N
6Iff2So86VE4YjStHjdZaNJd7AYthMGBs38/SjbZ42aZyBTzyf7LkUV9erZ2dLq1
lpjk5OS9Ur9k2DblTv8yUeOFR5FpXmO8iWsAhcMg/L6/mCmV0JEEZfA8QvXLV5hC
tuWP37kKC1aUUd1clnTuoSupwKjlVFM/mPfjo2OWbbqHzOxUTtgN4ZoGNJWpOKh6
6w1L/3GRzEZJRopYbzv06NMmppgrhWV7tF3F7tlh4BxL1aO+tl5PuXIGaI04l1R8
bk5dKBi5gAQGFtRT9VXDRvIuTa3KtJ9KbhHNFayZ7InvAbudvlXEzbdOMXObFMxU
uWSeBKB/5A3NNQ==
-----END CERTIFICATE-----